
Error: rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
File: 558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft (raw, json)
Hash identifier: 4yN0QBh2lGKb7eX3iuSAFqQVrDR6x7Rf3erSw/Y0/Ak=
Subject key identifier: A2:BB:D1:87:1E:33:6F:A0:3C:95:8B:92:6C:1A:3D:74:25:3D:8E:75
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Certificate issuer: /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial: 41E9F6B231F40C53D2DA5FD219847BABB7189AB1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
Manifest number: 048A
Signing time: Sat 22 Aug 2026 19:40:00 +0000
Manifest this update: Sat 22 Aug 2026 19:35:00 +0000
Manifest next update: Sun 23 Aug 2026 22:50:00 +0000
Files and hashes: 1: 323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa (hash: Uf71+lIsdCx07jQByeTOzoC0A0Pw6aqC3AHT0El2VYQ=)
2: 34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa (hash: ooUArFI7jD46Qywa7B/KeTAi5gPxVr/PYbEZk/qz0IY=)
3: 34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa (hash: LMzzrhzmAUlfsBEa68CgBpfRVLprrk9pmGbQqR2nIvY=)
4: 34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa (hash: ztBaO7SBjn8vfl+b8JbsrC6RvY/0WOFFarII8OlE82w=)
5: 34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa (hash: HaQEk7lOgs6GsPLMsAvaGEB6sc5wH9Na9Nw0lrcf4JI=)
6: 558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl (hash: L2BbfDI8lDf4fnsAwUglBKregz7UCWbwnXLmvvmYebk=)
7: 34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa (hash: OikAajYHOgRQNN8Auq4mxDBhJi3Cv5L79UfBlzQx9i4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e9:f6:b2:31:f4:0c:53:d2:da:5f:d2:19:84:7b:ab:b7:18:9a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Validity
Not Before: Aug 22 19:35:00 2026 GMT
Not After : Aug 23 22:50:00 2026 GMT
Subject: CN=A2BBD1871E336FA03C958B926C1A3D74253D8E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:22:65:2f:14:04:d4:36:35:ae:bf:4b:6e:
b2:94:0f:8e:e1:98:d2:9a:fa:81:b3:3c:0b:25:29:
5c:00:c6:9f:40:3a:b7:8a:72:1b:1d:ee:13:2d:4a:
47:2a:04:f9:3c:cd:39:b4:7c:6e:f4:85:93:43:89:
8e:4a:37:66:fc:6d:fd:7c:ed:5e:9d:3e:8e:cd:3f:
ec:e3:99:69:93:aa:ca:d4:4d:58:84:19:25:94:7b:
a7:6e:e3:0b:86:2f:75:a8:97:d8:ba:8b:f4:58:83:
30:9f:8f:33:72:0d:dc:8d:c8:79:a4:52:db:92:51:
13:f1:c6:8e:7b:89:a2:78:c4:ee:22:16:ab:03:0e:
a1:01:4c:c5:d6:70:75:ba:48:93:ad:aa:83:8c:b2:
9d:83:36:c6:6b:f7:16:2a:9e:4f:e7:76:f7:90:d3:
2c:30:ff:f4:8b:2b:ce:12:46:df:57:e3:2b:92:9b:
ec:b5:26:d5:8e:46:ee:76:e4:e1:0e:03:5f:36:43:
71:1b:96:b9:a9:db:cf:12:08:2b:98:da:1d:8e:31:
18:b7:b4:f6:d1:07:74:52:9f:3c:cf:a8:72:72:87:
90:7e:8d:78:f1:dc:66:3a:60:9b:cc:06:64:c6:9e:
06:76:62:d2:30:14:5f:23:d8:70:20:81:19:b9:9e:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:D1:87:1E:33:6F:A0:3C:95:8B:92:6C:1A:3D:74:25:3D:8E:75
X509v3 Authority Key Identifier:
keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:68:35:bf:85:7b:d2:85:7c:b1:56:c9:dc:22:d6:2b:d4:0a:
58:e1:28:9d:95:79:c6:d1:9e:aa:d4:87:a2:9e:d3:a1:fe:5e:
0d:6a:39:90:f1:5d:64:7b:3b:6b:8f:12:0b:51:2a:b6:02:fb:
62:5e:da:4b:cb:af:34:a7:a1:51:cb:de:ef:66:10:2d:78:62:
a3:aa:2c:1c:1c:e9:b1:dc:9a:52:6b:63:03:30:39:4d:f1:19:
e4:fe:d5:64:9c:81:f3:f1:8b:0a:e3:18:c2:b7:8a:5b:76:6a:
2f:f7:5f:06:12:c2:10:41:b5:6e:c1:ba:7c:37:5f:aa:95:23:
0d:0f:63:be:8f:53:1d:e2:ed:a8:6d:3f:29:d7:f8:b2:a4:b3:
8d:1b:de:8c:d8:33:f2:78:cf:d4:18:41:64:35:87:9f:8a:20:
a8:6e:3c:19:33:f6:e6:58:3b:d9:5b:69:74:53:ee:7f:28:a0:
dd:91:91:12:c8:2e:d9:55:12:d7:06:07:f8:79:c7:ea:73:9c:
eb:48:aa:79:fe:fc:1e:78:2d:3d:49:df:be:a0:b8:09:ee:82:
20:6c:84:17:73:48:fd:50:de:0a:88:c5:de:84:97:9e:78:2a:
01:20:b2:d9:55:cf:7d:dc:82:1b:ac:c7:f2:9e:be:f6:a9:a6:
b1:6c:34:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQen2sjH0DFPS2l/SGYR7q7cYmrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4MjQyRTg1QzZDOEQ1RTBFMTZGQTNGOUI3NUQ3N0ND
RjQ0OEE5RDAeFw0yNjA4MjIxOTM1MDBaFw0yNjA4MjMyMjUwMDBaMDMxMTAvBgNV
BAMTKEEyQkJEMTg3MUUzMzZGQTAzQzk1OEI5MjZDMUEzRDc0MjUzRDhFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDSJlLxQE1DY1rr9LbrKUD47h
mNKa+oGzPAslKVwAxp9AOreKchsd7hMtSkcqBPk8zTm0fG70hZNDiY5KN2b8bf18
7V6dPo7NP+zjmWmTqsrUTViEGSWUe6du4wuGL3Wol9i6i/RYgzCfjzNyDdyNyHmk
UtuSURPxxo57iaJ4xO4iFqsDDqEBTMXWcHW6SJOtqoOMsp2DNsZr9xYqnk/ndveQ
0yww//SLK84SRt9X4yuSm+y1JtWORu525OEOA182Q3Eblrmp288SCCuY2h2OMRi3
tPbRB3RSnzzPqHJyh5B+jXjx3GY6YJvMBmTGngZ2YtIwFF8j2HAggRm5nlp3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUorvRhx4zb6A8lYuSbBo9dCU9jnUwHwYDVR0j
BBgwFoAUVYJC6FxsjV4OFvo/m3XXfM9Eip0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOURBUWQyeTNHZ2FpOFJKRXNMZnRGdHJVYTladkdyeTM5Rk1WWVFQSGtu
TG4vMS81NTgyNDJFODVDNkM4RDVFMEUxNkZBM0Y5Qjc1RDc3Q0NGNDQ4QTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1ODI0MkU4NUM2QzhENUUw
RTE2RkEzRjlCNzVENzdDQ0Y0NDhBOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OURBUWQyeTNHZ2FpOFJKRXNMZnRGdHJVYTladkdyeTM5Rk1WWVFQSGtuTG4vMS81
NTgyNDJFODVDNkM4RDVFMEUxNkZBM0Y5Qjc1RDc3Q0NGNDQ4QTlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHGg1v4V70oV8sVbJ3CLWK9QKWOEonZV5xtGeqtSHop7Tof5eDWo5kPFdZHs7
a48SC1EqtgL7Yl7aS8uvNKehUcve72YQLXhio6osHBzpsdyaUmtjAzA5TfEZ5P7V
ZJyB8/GLCuMYwreKW3ZqL/dfBhLCEEG1bsG6fDdfqpUjDQ9jvo9THeLtqG0/Kdf4
sqSzjRvejNgz8njP1BhBZDWHn4ogqG48GTP25lg72VtpdFPufyig3ZGREsgu2VUS
1wYH+HnH6nOc60iqef78HngtPUnfvqC4Ce6CIGyEF3NI/VDeCojF3oSXnngqASCy
2VXPfdyCG6zH8p6+9qmmsWw0tw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:05:14 2026 by rpki-client